hxxps://github[.]com/Da2dalus/The-MALWARE-Repo | Triage

Resubmissions

27-09-2024 13:49

240927-q45laaxgne 10

27-09-2024 13:46

240927-q3bltaxfqc 9

27-09-2024 11:49

240927-ny4qpa1dkm 10

27-09-2024 11:43

240927-nvsh9a1bnk 10

Sharing

General

Target

https://github.com/Da2dalus/The-MALWARE-Repo
Sample

240927-q3bltaxfqc

Score

9^/10

defense_evasion discovery evasion execution impact ransomware

Malware Config

Targets

- Target
  
  https://github.com/Da2dalus/The-MALWARE-Repo
Score

9^/10

defense_evasion discovery evasion execution impact ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Modifies Windows Firewall
  evasion
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Direct Volume Access

Impair Defenses

Disable or Modify System Firewall

Indicator Removal

File Deletion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

urlscan1

behavioral1

defense_evasiondiscoveryevasionexecutionimpactransomware

behavioral2